What is CVE-2022-49670?

CVE-2022-49670 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, classified as a Divide By Zero flaw (CWE-369), affecting Linux kernel versions from 5.3 onward and patched in 5.4.204, 5.10.129, 5.15.53 and others. CVE-2022-49670 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2022-49670?

CVE-2022-49670 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2022-49670?

Yes, CVE-2022-49670 has been patched. Fixed versions include 5.4.204, 5.10.129, 5.15.53 and others. If you are running Linux kernel 5.3 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2022-49670 actively exploited?

CVE-2022-49670 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Divide By Zero (CWE-369)?

The product divides a value by zero, causing a crash or unexpected behaviour. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/369.html

CVE-2022-49670

Medium

In the Linux kernel, the following vulnerability has been resolved: linux/dim: Fix divide by 0 in RDMA DIM Fix a divide 0 error in rdma_dim_stats_compare() when prev->cpe_ratio == 0. CallTrace: Hardware name: H3C R4900 G3/RS33M2C9S, BIOS 2.00.37P21 03/12/2020 task: ffff880194b78000 task.stack: ffffc90006714000 RIP: 0010:backport_rdma_dim+0x10e/0x240 [mlx_compat] RSP: 0018:ffff880c10e83ec0 EFLAGS: 00010202 RAX: 0000000000002710 RBX: ffff88096cd7f780 RCX: 0000000000000064 RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 000000001d7c6c09 R13: ffff88096cd7f780 R14: ffff880b174fe800 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff880c10e80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000a0965b00 CR3: 000000000200a003 CR4: 00000000007606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <IRQ> ib_poll_handler+0x43/0x80 [ib_core] irq_poll_softirq+0xae/0x110 __do_softirq+0xd1/0x28c irq_exit+0xde/0xf0 do_IRQ+0x54/0xe0 common_interrupt+0x8f/0x8f </IRQ> ? cpuidle_enter_state+0xd9/0x2a0 ? cpuidle_enter_state+0xc7/0x2a0 ? do_idle+0x170/0x1d0 ? cpu_startup_entry+0x6f/0x80 ? start_secondary+0x1b9/0x210 ? secondary_startup_64+0xa5/0xb0 Code: 0f 87 e1 00 00 00 8b 4c 24 14 44 8b 43 14 89 c8 4d 63 c8 44 29 c0 99 31 d0 29 d0 31 d2 48 98 48 8d 04 80 48 8d 04 80 48 c1 e0 02 <49> f7 f1 48 83 f8 0a 0f 86 c1 00 00 00 44 39 c1 7f 10 48 89 df RIP: backport_rdma_dim+0x10e/0x240 [mlx_compat] RSP: ffff880c10e83ec0

Package Linux Kernel

Published 2025-02-26

Last modified 2025-10-01

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-369

CVE-2022-49670 is a Divide By Zero vulnerability

What is Divide By Zero?

The product divides a value by zero, causing a crash or unexpected behaviour. Learn more on MITRE CWE

Affected versions

Linux kernel versions 5.3 and later are affected. Fixed in 5.4.204, 5.10.129, 5.15.53, 5.18.10, 5.19 and their respective stable series.

Affected from

≥ 5.3

Fixed in

✓ 5.4.204 5.4.x ✓ 5.10.129 5.10.x ✓ 5.15.53 5.15.x ✓ 5.18.10 5.18.x ✓ 5.19

References

The following references provide additional information about CVE-2022-49670 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Kernel patch commit
https://git.kernel.org/stable/c/0b6e0eb5c45e79e9095de2498cc0ca5ec563fc5e
Patch
Kernel patch commit
https://git.kernel.org/stable/c/0fe3dbbefb74a8575f61d7801b08dbc50523d60d
Patch
Kernel patch commit
https://git.kernel.org/stable/c/5af106f8e072aebd88b95e164a08fa320651a99a
Patch

5 patch commits total View all on NVD

Details

CVE ID CVE-2022-49670

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2025-02-26

Modified 2025-10-01

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2022-49670?

CVE-2022-49670 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as a Divide By Zero flaw (CWE-369) . It affects Linux kernel versions from 5.3 onward and has been patched in 5.4.204, 5.10.129, 5.15.53 and others. CVE-2022-49670 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2022-49670?

CVE-2022-49670 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2022-49670?

Yes — CVE-2022-49670 has been patched. Fixed versions include 5.4.204, 5.10.129, 5.15.53 and others. If you are running Linux kernel 5.3 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2022-49670 actively exploited?

No — CVE-2022-49670 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
What is Divide By Zero (CWE-369)?

The product divides a value by zero, causing a crash or unexpected behaviour. View CWE-369 on MITRE CWE →